Ethereal-dev: Re: [Ethereal-dev] Regarding Memory allocation

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 15 Apr 2005 17:36:13 -0700
harshas wrote:

     Please tell me Is there any limitation on size of the captured file we
are opening in ethereal?

The size of a file must file in a "long", so that's 2^31-1 bytes on an ILP32 platform and 2^64-1 on an LP64 platform.

A data structure is allocated for every packet, so, if there are too many packets, Ethereal will run out of memory. There's no simple fixed number for how many "too many" is.

The widget used to display the packet list allocates a copy of the strings in each of the columns in each of the rows, so *that* can run out of memory with too many packets (again, there's no simple fixed number for how many "too many" is).